critical severity · published 2026-10-30
A malicious web page can read a victim's sessionId from the unauthenticated /sse endpoint and use it against /message to send unauthorized MCP tool calls. Depending on the configured tools, the attacker can make the victim's machine perform actions on the attacker's behalf.
CVE: CVE-2026-62863
Source: NVD
FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 662 and your operating system.